{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:b25bd1ce-e91a-57bc-932e-cedc417432ae", "version": 1, "metadata": { "supplier": { "name": "TuxCare", "url": [ "https://tuxcare.com" ] } }, "components": [ { "name": "@next/bundle-analyzer", "purl": "pkg:npm/%40next/bundle-analyzer@13.5.11-tuxcare.18", "type": "library", "bom-ref": "pkg:npm/%40next/bundle-analyzer@13.5.11-tuxcare.18", "version": "13.5.11-tuxcare.18", "supplier": { "url": [ "https://tuxcare.com" ], "name": "TuxCare" } } ], "vulnerabilities": [ { "id": "AIKIDO-2024-10173", "affects": [ { "ref": "pkg:npm/%40next/bundle-analyzer@13.5.11-tuxcare.18" } ], "bom-ref": "urn:uuid:2bbeaf59-f485-503e-9c68-35866372d514", "analysis": { "state": "resolved", "detail": "Vulnerability AIKIDO-2024-10173 is fixed in version 13.5.11-tuxcare.18 of @next/bundle-analyzer." } }, { "id": "AIKIDO-2025-10936", "affects": [ { "ref": "pkg:npm/%40next/bundle-analyzer@13.5.11-tuxcare.18" } ], "bom-ref": "urn:uuid:ca6c6c06-07d8-5716-960e-826c2b2d1b15", "analysis": { "state": "resolved", "detail": "Vulnerability AIKIDO-2025-10936 is fixed in version 13.5.11-tuxcare.18 of @next/bundle-analyzer." } }, { "id": "CVE-2024-34351", "affects": [ { "ref": "pkg:npm/%40next/bundle-analyzer@13.5.11-tuxcare.18" } ], "bom-ref": "urn:uuid:289fcbe6-6137-5233-a8f9-29c6119bab60", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-34351 is fixed in version 13.5.11-tuxcare.18 of @next/bundle-analyzer." } }, { "id": "CVE-2024-47831", "affects": [ { "ref": "pkg:npm/%40next/bundle-analyzer@13.5.11-tuxcare.18" } ], "bom-ref": "urn:uuid:746b8f90-0968-53c7-b0e9-3ed2ea41cd43", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-47831 is fixed in version 13.5.11-tuxcare.18 of @next/bundle-analyzer." } }, { "id": "CVE-2024-51479", "affects": [ { "ref": "pkg:npm/%40next/bundle-analyzer@13.5.11-tuxcare.18" } ], "bom-ref": "urn:uuid:4b709eec-6988-596a-b782-1e647d7fddbc", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-51479 is fixed in version 13.5.11-tuxcare.18 of @next/bundle-analyzer." } }, { "id": "CVE-2025-32421", "affects": [ { "ref": "pkg:npm/%40next/bundle-analyzer@13.5.11-tuxcare.18" } ], "bom-ref": "urn:uuid:20c856f1-9f1f-5c21-88af-85408e117046", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-32421 is fixed in version 13.5.11-tuxcare.18 of @next/bundle-analyzer." } }, { "id": "CVE-2025-48068", "affects": [ { "ref": "pkg:npm/%40next/bundle-analyzer@13.5.11-tuxcare.18" } ], "bom-ref": "urn:uuid:c6d59d98-7d8a-5b6a-b773-559d1f49e211", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-48068 is fixed in version 13.5.11-tuxcare.18 of @next/bundle-analyzer." } }, { "id": "CVE-2025-55173", "affects": [ { "ref": "pkg:npm/%40next/bundle-analyzer@13.5.11-tuxcare.18" } ], "bom-ref": "urn:uuid:3a292a03-caff-5014-b4ca-8eb39ee72dbc", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-55173 is fixed in version 13.5.11-tuxcare.18 of @next/bundle-analyzer." } }, { "id": "CVE-2025-55183", "affects": [ { "ref": "pkg:npm/%40next/bundle-analyzer@13.5.11-tuxcare.18" } ], "bom-ref": "urn:uuid:33d37cc9-2d96-5c16-847e-7594a15577e3", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-55183 is fixed in version 13.5.11-tuxcare.18 of @next/bundle-analyzer." } }, { "id": "CVE-2025-55184", "affects": [ { "ref": "pkg:npm/%40next/bundle-analyzer@13.5.11-tuxcare.18" } ], "bom-ref": "urn:uuid:479fd6b6-8532-5a32-847f-b6cc60b1dd6e", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-55184 is fixed in version 13.5.11-tuxcare.18 of @next/bundle-analyzer." } }, { "id": "CVE-2025-57752", "affects": [ { "ref": "pkg:npm/%40next/bundle-analyzer@13.5.11-tuxcare.18" } ], "bom-ref": "urn:uuid:85a111dd-fed6-5f18-8353-c40b901e8ad3", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-57752 is fixed in version 13.5.11-tuxcare.18 of @next/bundle-analyzer." } }, { "id": "CVE-2025-57822", "affects": [ { "ref": "pkg:npm/%40next/bundle-analyzer@13.5.11-tuxcare.18" } ], "bom-ref": "urn:uuid:19e48ceb-fe22-549e-9f62-dd6f74b11547", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-57822 is fixed in version 13.5.11-tuxcare.18 of @next/bundle-analyzer." } }, { "id": "CVE-2025-59471", "affects": [ { "ref": "pkg:npm/%40next/bundle-analyzer@13.5.11-tuxcare.18" } ], "bom-ref": "urn:uuid:765c9704-a19a-54af-ae44-6fe18f56db5d", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-59471 is fixed in version 13.5.11-tuxcare.18 of @next/bundle-analyzer." } }, { "id": "CVE-2025-59472", "affects": [ { "ref": "pkg:npm/%40next/bundle-analyzer@13.5.11-tuxcare.18" } ], "bom-ref": "urn:uuid:8e7d9c4c-5969-55c4-b482-adf0c2a2851c", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2025-59472 does not affect version 13.5.11-tuxcare.18 of @next/bundle-analyzer. not_affected \u2014 Version 13.5.11-tuxcare.13 is not affected by CVE-2025-59472. The vulnerable PPR (Partial Prerendering) resume endpoint feature does not exist in this version. The resume endpoint handler that processes `Next-Resume: 1` headers, the postponed-state processing logic, and the resume-data-cache decompression code were all introduced in much later Next.js versions (v16.3.0+). Version 13.5.11 predat...", "justification": "code_not_present" } }, { "id": "CVE-2025-67779", "affects": [ { "ref": "pkg:npm/%40next/bundle-analyzer@13.5.11-tuxcare.18" } ], "bom-ref": "urn:uuid:81c3509f-f44a-54f7-a4fe-6b3f1d9a98ec", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-67779 is fixed in version 13.5.11-tuxcare.18 of @next/bundle-analyzer." } }, { "id": "CVE-2026-27980", "affects": [ { "ref": "pkg:npm/%40next/bundle-analyzer@13.5.11-tuxcare.18" } ], "bom-ref": "urn:uuid:4fbac70c-e7d4-593f-94a0-a20e7c0f07a3", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-27980 is fixed in version 13.5.11-tuxcare.18 of @next/bundle-analyzer." } }, { "id": "CVE-2026-29057", "affects": [ { "ref": "pkg:npm/%40next/bundle-analyzer@13.5.11-tuxcare.18" } ], "bom-ref": "urn:uuid:c47a18bf-fb9e-5348-93ee-abced42c0b37", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-29057 is fixed in version 13.5.11-tuxcare.18 of @next/bundle-analyzer." } }, { "id": "CVE-2026-44572", "affects": [ { "ref": "pkg:npm/%40next/bundle-analyzer@13.5.11-tuxcare.18" } ], "bom-ref": "urn:uuid:bc19be32-f049-57a8-8511-e85b4bf128c2", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-44572 is fixed in version 13.5.11-tuxcare.18 of @next/bundle-analyzer." } }, { "id": "CVE-2026-44573", "affects": [ { "ref": "pkg:npm/%40next/bundle-analyzer@13.5.11-tuxcare.18" } ], "bom-ref": "urn:uuid:3ace5c9b-6977-5234-add3-854ad9526834", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-44573 is fixed in version 13.5.11-tuxcare.18 of @next/bundle-analyzer." } }, { "id": "CVE-2026-44577", "affects": [ { "ref": "pkg:npm/%40next/bundle-analyzer@13.5.11-tuxcare.18" } ], "bom-ref": "urn:uuid:233e92fd-209b-50e7-a137-11e0ca4ab60d", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-44577 is fixed in version 13.5.11-tuxcare.18 of @next/bundle-analyzer." } }, { "id": "CVE-2026-44578", "affects": [ { "ref": "pkg:npm/%40next/bundle-analyzer@13.5.11-tuxcare.18" } ], "bom-ref": "urn:uuid:ff67f38c-bf0a-5ad7-9209-0d87f2ce650b", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-44578 is fixed in version 13.5.11-tuxcare.18 of @next/bundle-analyzer." } }, { "id": "CVE-2026-44580", "affects": [ { "ref": "pkg:npm/%40next/bundle-analyzer@13.5.11-tuxcare.18" } ], "bom-ref": "urn:uuid:40730ed3-6cd7-58e8-8449-b19bd92fb77e", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-44580 is fixed in version 13.5.11-tuxcare.18 of @next/bundle-analyzer." } }, { "id": "CVE-2026-44581", "affects": [ { "ref": "pkg:npm/%40next/bundle-analyzer@13.5.11-tuxcare.18" } ], "bom-ref": "urn:uuid:618faa78-7abc-5345-83b6-5dfce8fa0231", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-44581 is fixed in version 13.5.11-tuxcare.18 of @next/bundle-analyzer." } }, { "id": "CVE-2026-44582", "affects": [ { "ref": "pkg:npm/%40next/bundle-analyzer@13.5.11-tuxcare.18" } ], "bom-ref": "urn:uuid:30572f96-165a-54e4-85eb-07942eeacf24", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-44582 is fixed in version 13.5.11-tuxcare.18 of @next/bundle-analyzer." } }, { "id": "CVE-2026-64641", "affects": [ { "ref": "pkg:npm/%40next/bundle-analyzer@13.5.11-tuxcare.18" } ], "bom-ref": "urn:uuid:6d214a0f-2f21-590e-83fc-02a8491e13b3", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-64641 is fixed in version 13.5.11-tuxcare.18 of @next/bundle-analyzer." } }, { "id": "CVE-2026-64643", "affects": [ { "ref": "pkg:npm/%40next/bundle-analyzer@13.5.11-tuxcare.18" } ], "bom-ref": "urn:uuid:128a37fc-ed83-5e66-8a32-b06cca48bf07", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-64643 is fixed in version 13.5.11-tuxcare.18 of @next/bundle-analyzer." } }, { "id": "CVE-2026-64645", "affects": [ { "ref": "pkg:npm/%40next/bundle-analyzer@13.5.11-tuxcare.18" } ], "bom-ref": "urn:uuid:858c999d-54d1-5370-bc98-478b14db4e9c", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-64645 is fixed in version 13.5.11-tuxcare.18 of @next/bundle-analyzer." } }, { "id": "CVE-2026-64646", "affects": [ { "ref": "pkg:npm/%40next/bundle-analyzer@13.5.11-tuxcare.18" } ], "bom-ref": "urn:uuid:5faad720-1c66-58b6-a344-43f06441767f", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-64646 is fixed in version 13.5.11-tuxcare.18 of @next/bundle-analyzer." } }, { "id": "CVE-2026-64647", "affects": [ { "ref": "pkg:npm/%40next/bundle-analyzer@13.5.11-tuxcare.18" } ], "bom-ref": "urn:uuid:61d3cc01-46f1-5601-b351-1d78beb10505", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-64647 is fixed in version 13.5.11-tuxcare.18 of @next/bundle-analyzer." } }, { "id": "CVE-2026-64648", "affects": [ { "ref": "pkg:npm/%40next/bundle-analyzer@13.5.11-tuxcare.18" } ], "bom-ref": "urn:uuid:48ec6ffe-8239-53c5-8fe0-fe689a37ebdd", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-64648 is fixed in version 13.5.11-tuxcare.18 of @next/bundle-analyzer." } }, { "id": "CVE-2026-75604", "affects": [ { "ref": "pkg:npm/%40next/bundle-analyzer@13.5.11-tuxcare.18" } ], "bom-ref": "urn:uuid:b6116936-1c38-5712-b32d-8b12a8db619d", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-75604 is fixed in version 13.5.11-tuxcare.18 of @next/bundle-analyzer." } }, { "id": "GHSA-2xp9-vwfh-vxw4", "affects": [ { "ref": "pkg:npm/%40next/bundle-analyzer@13.5.11-tuxcare.18" } ], "bom-ref": "urn:uuid:a7e02850-48b2-5c50-b0ff-fc4c7b2884fb", "analysis": { "state": "resolved", "detail": "Vulnerability GHSA-2xp9-vwfh-vxw4 is fixed in version 13.5.11-tuxcare.18 of @next/bundle-analyzer." } }, { "id": "GHSA-5j59-xgg2-r9c4", "affects": [ { "ref": "pkg:npm/%40next/bundle-analyzer@13.5.11-tuxcare.18" } ], "bom-ref": "urn:uuid:e45176d3-c16a-5ba6-8b74-b4f7007529e5", "analysis": { "state": "resolved", "detail": "Vulnerability GHSA-5j59-xgg2-r9c4 is fixed in version 13.5.11-tuxcare.18 of @next/bundle-analyzer." } }, { "id": "GHSA-8h8q-6873-q5fj", "affects": [ { "ref": "pkg:npm/%40next/bundle-analyzer@13.5.11-tuxcare.18" } ], "bom-ref": "urn:uuid:585f92bb-b7f8-58a3-8dd5-3e1945668137", "analysis": { "state": "resolved", "detail": "Vulnerability GHSA-8h8q-6873-q5fj is fixed in version 13.5.11-tuxcare.18 of @next/bundle-analyzer." } }, { "id": "GHSA-h25m-26qc-wcjf", "affects": [ { "ref": "pkg:npm/%40next/bundle-analyzer@13.5.11-tuxcare.18" } ], "bom-ref": "urn:uuid:f6934bd8-566c-55dc-92a2-5fb3756a9797", "analysis": { "state": "resolved", "detail": "Vulnerability GHSA-h25m-26qc-wcjf is fixed in version 13.5.11-tuxcare.18 of @next/bundle-analyzer." } }, { "id": "GHSA-mwv6-3258-q52c", "affects": [ { "ref": "pkg:npm/%40next/bundle-analyzer@13.5.11-tuxcare.18" } ], "bom-ref": "urn:uuid:af75cc3c-76fb-5ba8-901a-33563213d055", "analysis": { "state": "resolved", "detail": "Vulnerability GHSA-mwv6-3258-q52c is fixed in version 13.5.11-tuxcare.18 of @next/bundle-analyzer." } }, { "id": "GHSA-q4gf-8mx6-v5v3", "affects": [ { "ref": "pkg:npm/%40next/bundle-analyzer@13.5.11-tuxcare.18" } ], "bom-ref": "urn:uuid:e970472d-9432-504d-8b04-f8ffc497fe40", "analysis": { "state": "resolved", "detail": "Vulnerability GHSA-q4gf-8mx6-v5v3 is fixed in version 13.5.11-tuxcare.18 of @next/bundle-analyzer." } } ], "dependencies": [ { "ref": "pkg:npm/%40next/bundle-analyzer@13.5.11-tuxcare.18" } ] }